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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1. (Currently Amended) In a sending computer system that is network connectable 
to one or more receiving computer systems, the sending computer system being configured to 
send electronic messages to the receiving computer systems, a method for verifying that 
responses to a connection initiation sent by the sending computer system originate from a 
designated indicating to a receiving computer system that the sending computer system is 
receiving connection responses from the receiving computer system , the method comprising: 

an act of sending connection initiation data to a designated receiving computer 
system, the connection initiation data including a purported sending address of the 
sending computer system ; 

an act of receiving altered connection establishment data that includes address 
validation data and at least a portion of non-standard data that is not otherwise included 
in such a connection establishment random sequenc e of characters , such that the 
inclusion of the portion of non-standard data random s e quenc e of characters substantially 
decreases the likelihood of providing an appropriate connection response without 
knowing that the portion of non-standard data random sequence of characters is to be 
provided in the connection response; 

an act of verifying that the connection response was received from the designated 
receiving computer system based on a determination that the connection response 
included the address validation data and the portion of non-standard data; 

an act of g enerating an appropriate connection response based on the address 
validation data and the portion of non-standard data random sequence of characters , the 
response including the portion of non-standard data random sequence of characters in a 
form recognized by the verified receiving computer system as an appropriate form; and 

an act of sending the appropriate connection response data to the receiving 
computer system. 
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2. (Original) The method as recited in claim 1, wherein the act of sending 
connection initiation data to a receiving computer system comprises an act of sending 
Transmission Control Protocol connection initiation data. 

3. (Original) The method as recited in claim 1, wherein the act of sending 
connection initiation data to a receiving computer system comprises an act of sending an SMTP 
HELO command or SMTP EHLO command. 

4. (Original) The method as recited in claim 1, wherein the act of receiving altered 
connection establishment data that includes address validation data comprises an act of receiving 
altered connection establishment data wherein the altered connection establishment data is 
selected from among a request to resend connection initiation data and connection establishment 
data that has been separated into a plurality of network packets. 

5. (Original) The method as recited in claim 1, wherein the act of receiving altered 
connection establishment data that includes address validation data comprises an act of receiving 
an act of receiving a HELO response command or EHLO response command that includes a 
random sequence of characters. 

6. (Original) The method as recited in claim 1, wherein the act of generating an 
appropriate connection response based on the address validation data comprises an act of 
generating an appropriate connection response wherein the appropriate connection response is 
selected from among resending the connection initiation data and sending a network packet with 
an appropriate acknowledgment sequence number. 

7. (Original) The method as recited in claim 1, wherein the act of generating an 
appropriate connection response based on the address validation data comprises an act of 
including a random sequence of characters in an enhanced NOOP command, the random 
sequence of characters being received from the receiving computer system in response to the 
connection initiation data. 
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8. (Original) The method as recited in claim 1, wherein the act of sending the 
appropriate connection response data to the receiving computer system comprises an act of 
sending an enhanced NOOP command that includes a random sequence of characters, the 
random sequence of characters being received from the receiving computer system in response to 
the connection initiation data. 
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9. (Currently Amended) In a receiving computer system that is network connectable 
to one or more sending computer systems, the receiving computer system being configured to 
receive electronic messages from the sending computer systems, a method for the receiving 
computer system detecting whether a sending computer system is receiving connection 
establishment responses, the method comprising: 

an act of receiving connection initiation data from a sending computer system, the 
connection initiation data including a purported sending address of the sending computer system ; 

an act of altering standard connection establishment data to include address validation 
data and at least a portion of non-standard data that is not otherwise included in such a 
connection establishment random s e quence of characters , such that the inclusion of the portion of 
non-standard data random sequ e nc e of characters substantially decreases the likelihood of 
providing an appropriate connection response without knowing that the portion of non-standard 
data random s e qu e nc e of charact e rs is to be provided in the connection response; and 

an act of sending the altered connection establishment data to the purported sending 
address , the sending computer system with the purported sending address being configured to 
verify that the connection response was received from the receiving computer system based on a 
determination that the connection response included the address validation data and the portion 
of non-standard data. T-and 



address appropriately responded to the address validation data, the appropriate response 
including the random sequence of characters in a form recognized by the receiving computer 



10. (Previously Presented) The method as recited claim 9, wherein the act of 
receiving connection initiation data from a sending computer system comprises an act of 
receiving Transmission Control Protocol connection initiation data. 

11. (Previously Presented) The method as recited claim 9, wherein the act of 
receiving connection initiation data from a sending computer system comprises an act of 
receiving an SMTP HELO command or receiving an SMTP EHLO command. 



act of dete 



if a computer system that corresponds to the pur] 




syst e m 



appropriate form. 



Page 5 of 22 



Application No. 10/684,020 

Amendment "B" dated March 7, 2008 

Reply to Office Action mailed December 7, 2007 



12. (Previously Presented) The method as recited in claim 9, wherein the act of 
altering standard connection establishment data to include address validation data comprises an 
act of altering a standard response to Transmission Control Protocol connection initiation data to 
request retransmission of the Transmission Control Protocol connection initiation data. 

13. (Previously Presented) The method as recited in claim 9, wherein the act of 
altering standard connection establishment data to include address validation data comprises an 
act of separating Transmission Control Protocol connection establishment data into a plurality of 
network packets. 

14. (Previously Presented) The method as recited in claim 9, wherein the act of 
altering standard connection establishment data to include address validation data comprises an 
act of including a random sequence of characters in an SMTP HELO response command or 
SMTP EHLO response command. 

14. (Previously Presented) The method as recited in claim 9 wherein, the act of 
sending the altered connection establishment data to the purported sending address comprises an 
act of sending altered Transmission Control Protocol connection establishment data to a 
purported Internet Protocol address. 

16. (Previously Presented) The method as recited in claim 9 wherein, the act of 
sending the altered connection establishment data to the purported sending address comprises an 
act of sending an SMTP HELO response command or sending an SMTP EHLO response 
command that includes a random sequence of characters. 

17. (Previously Presented) The method as recited in claim 9, wherein the act of 
determining if a computer system that corresponds to the purported sending address 
appropriately responded to the address validation data comprises an act of determining if the 
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purported sending address responded appropriately to altered Transmission Control Protocol 
connection establishment data. 

18. (Previously Presented) The method as recited in claim 9, wherein the act of 
determining if a computer system that corresponds to the purported sending address 
appropriately responded to the address validation data comprises an act of determining if the 
purported sending address responded appropriately to altered Transmission Control Protocol 
connection establishment data. 

19. (Previously Presented) The method as recited in claim 9, wherein the act of 
determining if a computer system that corresponds to the purported sending address 
appropriately responded to the address validation data comprises an act of determining if the 
purported sending address responded with an enhanced NOOP command including a random 
string of characters that was included in the address validation data. 

20. (Previously Presented) The method as recited in claim 9, further comprising: 

an act of issuing a DNS query for a DNS record set corresponding to the purported 
sending address, when the purported sending address does not appropriately respond to the 
address validation data; and 

an act of receiving one or more TXT records that include XML instructions indicating 
whether or not the purported sending address supports the use of address validation data. 
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21. (Currently Amended) In a receiving domain that is network connectable to one or 
more sending domains, the receiving domain including one or more receiving messaging servers 
configured to receive electronic messages from sending domains, a method for determining if a 
sending messaging server is authorized to send electronic messages for a sending domain, the 
method comprising: 

an act of receiving an electronic message purportedly sent from the sending 
domain, the electronic message including at least a portion of non-standard data that is 
not otherwise included in such a connection establishment random sequence of 
character s, such that the inclusion of the portion of non-standard data random s e quence of 




charact e rs substantially decreases the likelihood of providing an appropriate connection 
response without knowing that the portion of non-standard data random sequence of 




charact e rs is to be provided in the connection response; 

an act of examining a plurality of parameter values of the electronic message 
including the portion of non-standard data random sequence of characters to attempt to 
verify that the connection response was received from the designated receiving domain 
based on a determination that the connection response included the address validation 
data and the portion of non-standard data identify an actual sending sid e network address 




corresponding to a sending computer syst e m ; 

an act of querying a name server for a list of network addresses authorized to send 
electronic messages for the sending domain; 

an act of determining if the actual sending side network address is authorized to 
send electronic messages for the sending domain based on the query and on the inclusion 
of the portion of non-standard data random sequence of characters in a form recognized 
by the verified r eceiving domain as an appropriate form; and 

an act of providing results of the determination to an message classification 
module such that the message classification module can make a more reliable decision as 
to classifying the received electronic message. 

22. (Previously Presented) The method as recited in claim 21, wherein the act of 
receiving an electronic message purportedly sent from the sending side domain comprises an act 
of receiving an electronic mail message. 
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23. (Previously Presented) The method as recited in claim 21, wherein an act of 
receiving an electronic message purportedly sent from the sending domain comprises an act of 
receiving an electronic message that does not include a Reverse-Path parameter value. 

24. (Previously Presented) The method as recited in claim 21, wherein an act of 
examining a plurality of parameter values of the electronic message to attempt to identify an 
actual sending side network address comprises an act of identifying an Internet Protocol address 
corresponding to the sending computer system. 

25. (Previously Presented) The method as recited in claim 21, wherein an act of 
examining a plurality of parameter values of the electronic message to attempt to identify an 
actual sending side network address comprises an act of examining a plurality of parameter 
values wherein at least one of the plurality of parameter values is selected from among a first 
Resent-Sender header value, a first mailbox value in the Resent-From header, a Sender header 
value, or a first mailbox value in the From header. 

26. (Previously Presented) The method as recited in claim 21, wherein the act of 
querying a name server for a list of network addresses authorized to send electronic messages for 
the sending domain comprises an act of querying a Domain Name Services server for a list of 
network addresses authorized to send electronic messages for the sending domain. 

27. (Previously Presented) The method as recited in claim 26, wherein the act of 
querying a Domain Name Services server for a list of network addresses authorized to send 
electronic messages for the sending domain comprises the act of querying a Domain Name 
Services for a list of Internet Protocol addresses authorized to send electronic mail message for 
the sending domain. 

28 . (Previously Presented) The method as recited in claim 2 1 , further comprising: 

an act of receiving a list of network addresses that are authorized to send electronic 
messages for the sending domain. 
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29. (Previously Presented) The method as recited in claim 28, wherein an act of 
receiving a list of network addresses that are authorized to send electronic messages comprises 
an act of receiving one or more DNS TXT records. 

30. (Previously Presented) The method as recited in claim 29, wherein an act of 
receiving a list of network addresses that are authorized to send electronic messages comprises 
an act of receiving one or more DNS TXT records that encode the list of network addresses in 
XML instructions. 

31. (Previously Presented) The method as recited in claim 30, wherein an act of 
receiving one or more DNS TXT records that encode the list of network addresses in XML 
instructions comprises an act of receiving electronic messaging configuration information that 
spans across a plurality DNS TXT records such that the electronic message configuration 
information can be concatenated into an XML instance. 

32. (Previously Presented) The method as recited in claim 31, wherein the act of 
receiving electronic messaging configuration information that spans across a plurality DNS TXT 
records such that the electronic message configuration information can be concatenated into an 
XML instance comprises an act of receiving a plurality of DNS TXT records that include 
ordering data indicating how the XML instructions contained in the DNS TXT records are to be 
ordered. 

33. (Previously Presented) The method as recited in claim 32, further comprising: 

an act of concatenating the XML instructions according to the ordering data to generate 
an XML instance. 

34. (Previously Presented) The method as recited in claim 21, wherein the act of 
determining if the actual sending side network address is authorized to send electronic messages 
for the sending domain comprises an act of determining that the actual sending side network 
address is contained in a received list of authorized network addresses. 
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35. (Previously Presented) The method as recited in claim 21, wherein the act of 
determining if the actual sending side network address is authorized to send electronic messages 
for the sending domain comprises an act of determining that the actual sending side network 
address is not contained in a received list of authorized network addresses. 

36. (Previously Presented) The method as recited in claim 21, wherein the act of an 
act of providing results of the determination to an message classification module comprises an 
act of indicating to the message classification module that the actual sending side network 
address is authorized to send electronic messages for the sending domain. 

37. (Previously Presented) The method as recited in claim 21, wherein the act of an 
act of providing results of the determination to an message classification module comprises an 
act of indicating to the message classification module that the actual sending side network 
address is not authorized to send electronic messages for the sending domain. 
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38. (Currently Amended) A computer program product for use in a sending computer 
system that is network connectable to one or more receiving computer systems, the sending 
computer system being configured to send electronic messages to the receiving computer 
systems, the computer program product for implementing a method for verifying that responses 
to a connection initiation sent by the sending computer system originate from a designated 
indicating to a receiving computer system that the sending computer system is r e ceiving 
connection responses from th e receiving computer syst e m , the computer program product 
comprising one or more computer-readable media having stored thereon computer executable 
instructions that, when executed by a processor, cause the sending computer system to perform 
the following: 

send connection initiation data to a designated receiving computer system, the connection 
initiation data including a purported sending address of the sending computer system ; 

receive altered connection establishment data that includes address validation data and at 
least a portion of non-standard data that is not otherwise included in such a connection 
establishment random s e qu e nce of charact e rs , such that the inclusion of the portion of non- 
standard data random sequence of characters substantially decreases the likelihood of providing 
an appropriate connection response without knowing that the portion of non-standard data 
random s e quence of characters is to be provided in the connection response; 

verify that the connection response was received from the designated receiving computer 
system based on a determination that the connection response included the address validation 
data and the portion of non-standard data; 

generate an appropriate connection response based on the address validation data and the 
portion of non-standard data random sequ e nce of characters , the response including the portion 
of non-standard data random s e qu e nc e of charact e rs in a form recognized by the verified 
receiving computer system as an appropriate form; and 

send the appropriate connection response data to the receiving computer system. 

39. (Previously Presented) The computer program product as recited in claim 38, 
wherein computer-executable instructions that, when executed by a processor, cause the sending 
computer system to receive altered connection establishment data that includes address 
validation data comprise computer-executable instructions that, when executed by a processor, 
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cause the sending computer system to receive an SMTP HELO command or SMTP EHLO 
command that includes a random sequence of characters. 

40. (Previously Presented) The computer program product as recited in claim 38, 
wherein computer-executable instructions that, when executed by a processor, cause the sending 
computer system to send the appropriate connection response data to the receiving computer 
system comprise computer-executable instructions that, when executed by a processor, cause the 
sending computer system to send an enhanced SMTP NOOP command including a random 
sequence of characters that was included in the received address validation data. 
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41. (Currently Amended) A computer program product for use in a receiving 
computer system that is network connectable to one or more sending computer systems, the 
receiving computer system being configured to receive electronic messages from the sending 
computer systems, the computer program product for implementing a method for the receiving 
computer system detecting whether a sending computer system is receiving connection 
establishment responses, the computer program product comprising one or more computer- 
readable media having stored thereon computer executable instructions that, when executed by a 
processor, cause the receiving computer system to perform the following: 

receive connection initiation data from a sending computer system, the connection 
initiation data including a purported sending address of the sending computer system ; 

alter standard connection establishment data to include address validation data and at 
least a portion of non-standard data that is not otherwise included in such a connection 
establishment random s e qu e nce of characters , such that the inclusion of the portion of non- 
standard data random s e quence of characters substantially decreases the likelihood of providing 
an appropriate connection response without knowing that the portion of non-standard data 
random s e qu e nc e of characters is to be provided in the connection response; and 

send the altered connection establishment data to the purported sending address , the 
sending computer system with the purported sending address being configured to verify that the 
connection response was received from the receiving computer system based on a determination 
that the connection response included the address validation data and the portion of non-standard 
data.T -and 

determin e if a computer system that corresponds to the purported sending address 
appropriately responded to the address validation data, the appropriat e response including the 
random sequence of characters in a form recognized by th e receiving comput e r system as an 
appropriate form. 

42. (Previously Presented) The computer program product as recited in claim 41, 
wherein computer-executable instructions that, when executed by a processor, cause the 
receiving computer system to alter standard connection establishment data to include address 
validation data comprises computer-executable instructions that, when executed by a processor, 
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cause the receiving computer system to include a random sequence of characters in an SMTP 
HELO response command or SMTP EHLO response command. 

43-44. (Cancelled). 
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45. (Currently Amended) A computer program product for use in a receiving domain 
that is network connectable to one or more sending domains, the receiving domain including one 
or more receiving messaging servers configured to receive electronic messages from sending 
domains, the computer program product for implementing a method for determining if a sending 
messaging server is authorized to send electronic messages for a sending domain, the computer 
program product comprising one or more computer-readable media having stored thereon 
computer executable instructions that, when executed by a processor, cause the receiving domain 
to perform the following: 

receive an electronic message purportedly sent from the sending domain, the 
electronic message including at least a portion of non-standard data that is not otherwise 
included in such a connection establishment random sequence of characters , such that the 
inclusion of the portion of non-standard data random sequence of characters substantially 
decreases the likelihood of providing an appropriate connection response without 
knowing that the portion of non-standard data random sequence of characters is to be 
provided in the connection response; 

examine a plurality of parameter values of the electronic message including the 
portion of non-standard data random aequonco of charactoro to attempt to verify that the 
connection response was received from the designated receiving domain based on a 
determination that the connection response included the address validation data and the 
portion of non-standard data identify an actual sending side network address 
corresponding to a sending computer sy s tem ; 

query a name server for a list of network addresses authorized to send electronic 
messages for the sending domain; 

determine if the actual sending side network address is authorized to send 
electronic messages for the sending domain based on the query and on the inclusion of 
the portion of non-standard data random sequence of characters in a form recognized by 
the verified receiving domain as an appropriate form; and 

provide results of the determination to an message classification module such that 
the message classification module can make a more reliable decision as to classifying the 
received electronic message. 
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46. (Previously Presented) The computer program product as recited in claim 45, 
wherein computer executable instructions that, when executed by a processor, cause the 
receiving domain to examine a plurality of parameter values of the electronic message to attempt 
to identify an actual sending side network address comprise computer executable instructions 
that, when executed by a processor, cause the receiving domain to examine a plurality of 
parameter values wherein at least one of the plurality of parameter values is selected from among 
a first Resent-Sender header value, a first mailbox value in the Resent-From header, a Sender 
header value, or a first mailbox value in the From header. 

47-48. (Cancelled). 

49. (New) The method of claim 1, wherein the sending computer system includes 
records indicating support for exchange of non-standard connection establishment data in a DNS 
record set, the DNS record set indicating the electronic mail policy for a domain of the sending 
computer system. 

50. (New) The method of claim 1 , wherein the portion of non-standard data includes a 
random sequence of characters. 

51. (New) The method of claim 1, wherein the portion of non-standard data includes 
regenerated connection initiation data. 

52. (New) The method of claim 1, wherein the portion of non-standard data includes 
an appropriate acknowledgement sequence number. 
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